<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Xbox 360-Open NAT but still blocking traffic?]]></title><description><![CDATA[<p dir="auto">This has been driving me insane so I'm hoping you guys can shed some light for me.  I couldn't find anyone else with this issue so I am sorry if I missed it somewhere.</p>
<p dir="auto">First off, my current setup is like this Modem &gt; Asus RT-N66U (192.168.7.1) &gt; pfSense Wan(192.168.7.77) &gt; pfSense LAN (192.168.1.100) &gt; gigabit switch &gt; Xbox360(192.168.1.20) assigned via pfSense.  I realize that I shouldn't have the Asus in there but at the moment I can't do anything about it.  I did however setup my pfSense box as a DMZ (192.168.7.77) so everything is coming to it.</p>
<p dir="auto">So right now I have upnp turned on with no user specified rules.  The Xbox and all of the games I have tried report open NAT and in the upnp status page it says: 'Xbox (192.168.1.20:3074) 3074 UDP' so upnp appears to be working.  This is where it gets weird though.  When I try to do a chat or party with a friend over live his IP pops up in my firewall log with port 3074 trying to get to 192.168.7.77(the pfSense box) on a random port which is blocked.  Since it is blocked the connection always fails.  As a matter of fact, if I join any gears of war online game I always get a few different IP's coming in on random ports trying to get to 192.168.7.77:60396. I haven't seen 60396 listed anywhere in reference to Xbox Live so I am not sure why it wants that port so much.  Also, I cant help but notice that the destination IP is always the pfSense WAN instead of my Xbox which I think is the problem.</p>
<p dir="auto">Short of putting another NIC card in my pfSense box and making my xbox a DMZ or forwarding every port to it I don't know what to do.  I'm thinking the Asus router is screwing everything up for me but I'm not 100% sure.  If you guys have anything I could try I would greatly appreciate it.</p>
]]></description><link>https://forum.netgate.com/topic/57198/xbox-360-open-nat-but-still-blocking-traffic</link><generator>RSS for Node</generator><lastBuildDate>Sun, 11 Oct 2026 02:59:21 GMT</lastBuildDate><atom:link href="https://forum.netgate.com/topic/57198.rss" rel="self" type="application/rss+xml"/><pubDate>Sun, 09 Jun 2013 04:16:43 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to Xbox 360-Open NAT but still blocking traffic? on Sun, 09 Jun 2013 23:52:25 GMT]]></title><description><![CDATA[<p dir="auto">Unfortunately its not my network to start switching around components around. The whole reason I set up a pfSense box was to play around with it and get familiar with it so when I get out of here and have my own house I am used to it.  I've already learned a ton and I am enjoying playing with around with it.</p>
<p dir="auto">Do you think the Asus router is what is causing the issues?  I know having double NAT is asking for problems so I wouldn't be surprised.  Im thinking I might just pop a spare NIC in and mess with having a DMZ just for fun. Like I said I'm open to any suggestions.</p>
]]></description><link>https://forum.netgate.com/post/399869</link><guid isPermaLink="true">https://forum.netgate.com/post/399869</guid><dc:creator><![CDATA[CynicalCypher]]></dc:creator><pubDate>Sun, 09 Jun 2013 23:52:25 GMT</pubDate></item><item><title><![CDATA[Reply to Xbox 360-Open NAT but still blocking traffic? on Sun, 09 Jun 2013 14:12:02 GMT]]></title><description><![CDATA[<p dir="auto">You should have the Asus behind your pfsense box in bridge mode and do NAT only on pfsense. Is there a reason you have it setup before pfsense?</p>
]]></description><link>https://forum.netgate.com/post/399823</link><guid isPermaLink="true">https://forum.netgate.com/post/399823</guid><dc:creator><![CDATA[fragged]]></dc:creator><pubDate>Sun, 09 Jun 2013 14:12:02 GMT</pubDate></item></channel></rss>